Denis Flaven 32ce26aa7d Fix for potential XSS vulnerability on uploaded file names. To be further tested before retrofitting in branches. ...

SVN:trunk[3985]

2016-04-05 16:15:29 +00:00

..

php-ofc-library

Exclude a (risky) and unused file for the build

2011-09-13 14:38:52 +00:00

ajax.csvimport.php

CSV import GUI: now matching more representations (object id and external fields that are external keys)

2015-09-04 08:40:32 +00:00

ajax.render.php

Fix for potential XSS vulnerability on uploaded file names. To be further tested before retrofitting in branches.

2016-04-05 16:15:29 +00:00

audit.php

#1144 Audit category having no rule -> PHP notices when showing the report + improved the behavior when the OQL of a rule is wrong.

2015-09-09 13:38:52 +00:00

csvimport.php

Export/CSV:

2015-08-17 15:11:46 +00:00

exec.php

#714: localization of the date picker calendar. Get rid of the old jquery.datepicker.js file since iTop now relies on the built-in jQuery UI date picker widget.

2015-07-07 16:27:09 +00:00

graphviz.php

Restore authentication for generating the life-cycle charts in the right language.

2012-12-13 14:37:20 +00:00

index.php

Redirect from /pages/index.php to /index.php (to prevent users from listing the directory)

2010-09-13 12:36:58 +00:00

logoff.php

#765: prevent two persons to edit the same object at the same time.

2015-07-02 15:40:39 +00:00

navigator.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

notifications.php

Fixed regression in the Notifications page (leading to a conflict between the two tabs)

2013-12-03 08:33:54 +00:00

opensearch.xml.php

Updated copyright (2012) and license (LGPL changed to AGPL)

2012-10-23 21:41:36 +00:00

preferences.php

Added a demo mode (config: demo_mode = true). In that mode, logins get read-only (even for admins)

2013-10-23 13:36:44 +00:00

run_query.php

Exclude magic parameters when listing query parameters (refactoring from run_query) This enables the use of magic parameters in the exports. The issue was less exposed in iTop 2.2.0 because only one single magic parameter was available.

2016-03-11 20:42:04 +00:00

schema.php

Small enhancement to the display of the meta model: in the list of transitions, display the code of the event as a tooltip.

2015-06-23 15:47:33 +00:00

UI.php

Initial feedback whilie loading the 'list' tab of the impact analysis, useful when this tab is displayed first.

2016-03-15 09:39:59 +00:00

UniversalSearch.php

Code cleanup: deprecated the unused (and empty) class CMDBSearchFilter, replaced by DBSearch or DBObjectSearch depending on the usage.

2015-07-09 07:36:39 +00:00

xml.navigator.php

Code refactoring: removed a debug trace

2016-03-24 10:40:54 +00:00